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Response to Amendment 



1. This action is responsive to connmunication received on Dec. 29, 2003. Claim 6 
has been amended. Claims 1-30 are pending examination. 



The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

2. Claim 1 is rejected under 35 U.S.C. 102(e) as being anticipated by Riddle et a!., 
U.S. Patent No. 6,457,051 (referred to hereafter as Riddle). 

Riddle teaches the invention as claimed including a system for protocol 
processing in a computer network (see abstract). 

As to claim 1, Riddle teaches a method for identifying protocol encapsulation in 
received network data comprising providing a grammar and parsing incoming network 
data using said grammar, said network data being organized into data packets (see col. 
13 lines 57-67 and claim 1 , where the grammar is the rules of matching the data 
packets to a traffic specification). 



The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 



Claim Rejections - 35 USC § 102 



Claim Rejections - 35 USC § 103 



• 
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(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claim 2 is rejected under 35 U.S.C. 103(a) as being unpatentable over Riddle in 
view of Del Monte, U.S. Patent No. 5,704,060. 

As to claim 2, Riddle teaches a method for identifying protocol encapsulation in 
received network data comprising providing a grammar and parsing incoming network 
data using said grammar, said network data being organized into data packets (see the 
rejection of claim 1 ) wherein said grammar is a grammar graph (see claim 3, tree type 
node being the grammar graph). Riddle doesn't teach the method of claim 1 wherein the 
method further including providing a deterministic finite automaton (DFA) representing 
said grammar graph. 

However, Del Monte teaches providing a deterministic finite automaton (DFA) 
representing grammar graph (see col. 14lines 21-31). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to modify Riddle in view of including a DFA representing said grammar 
graph as in Del Monte. One would be motivated to include a DFA in Riddle because 
doing so would allow the network to map an ordered sequence of input events into a 
corresponding sequence according to the control section of the data where the next 
state is uniquely determined by a single input event. 

4. Claims 3, 4, 6-8 and 27 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Riddle in view of Tang, U.S. Patent No. 6,378,126. 
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As to claim 3, Riddle teaches a method for identifying protocol encapsulation in 
received network data comprising providing a grammar and parsing incoming network 
data using said grammar, said network data being organized into data packets (see the 
rejection of claim 1 . 

Riddle doesn't teach the method of claim 1 further including scanning said 
incoming network data using lexical token scanning to produce plural lexical tokens. 

However Tang teaches scanning said incoming network data using lexical token 
scanning to produce plural lexical tokens and parsing said lexical tokens (see abstract, 
statements in a program are lexically scanned and parsed into a parse tree). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to modify Riddle in view of lexically scanning incoming data packets and 
parsing the lexical tokens as in Tang. One would be motivated to include lexical 
scanning of packets and parsing lexical tokens in Riddle because doing so would allow 
the processor to read the specific lexical token relating to the control protocol layer that 
the instruction belongs to rather than reading the whole instruction or packet and thus 
creating faster communications medium and faster data routing. 

As to claim 4, Tang also teaches lexical scanning includes providing a set of 
regular expressions (see abstract). 

As to claim 6, Riddle teaches a method for processing data packets comprising: 
providing a grammar (see claim 1 , where the grammar is the rules of 
matching the data packets to a traffic specification).; 
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receiving plural data packets, each having a length not necessarily equal 
to one another (see claim 1); and 

parsing data to produce one or more identified protocols, and processing 
said data packet based on said identified protocols (see fig. 4A and its corresponding 
illustration). 

Riddle doesn't teach the limitation "lexically scanning data packet to produce 
lexical tokens". However Tang teaches lexically scanning data packet to produce lexical 
tokens (see abstract, statements in a program are lexically scanned and parsed Into a 
parse tree). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to modify Riddle in view of lexically scanning incoming data packets and 
parsing the lexical tokens as in Tang. One would be motivated to include lexical 
scanning of packets and parsing lexical tokens in Riddle because doing so would allow 
the processor to read the specific lexical token relating to the control protocol layer that 
the instruction belongs to rather than reading the whole instruction or packet and thus 
creating faster communications medium and faster data routing. 

As to claim 7, Riddle teaches the method of claim 6 further including compiling 
said grammar to produce grammar graph (see claim 3). 

As to claim 8, Riddle teaches the method of claim 7 wherein said scanning 
includes providing regular expressions for identifying said lexical tokens (see Table. 3 in 
col. 15). 

As to claim 27, Riddle teaches a network packet classifier comprising: 
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means for receiving an incoming network packet (see fig. 1 and its 
corresponding illustration); and 

means for identifying protocol structure in said network packet including 
means for scanning to match patterns in its constituent data against plural regular 
expressions and means for parsing through said lexical tokens using a grammar (see 
claim 1 and Table. 3 included in col. 15). 

Riddle doesn't teach the method of claim 1 further including scanning said 
incoming network data using lexical token scanning to produce plural lexical tokens. 

However Tang teaches scanning said incoming network data using lexical token 
scanning to produce plural lexical tokens and parsing said lexical tokens (see abstract, 
statements in a program are lexically scanned and parsed into a parse tree). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to modify Riddle in view of lexically scanning incoming data packets and 
parsing the lexical tokens as in Tang. One would be motivated to include lexical 
scanning of packets and parsing lexical tokens in Riddle because doing so would allow 
the processor to read the specific lexical token relating to the control protocol layer that 
the instruction belongs to rather than reading the whole instruction or packet and thus 
creating faster communications medium and faster data routing. 
5. Claims 5, 9, 10, 18, 22, 23, 28 and 29 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Riddle in view of Tang in further view of Del Monte. 

As to claims 5, 9 and 10, Riddle and Tang do not teach the limitation "providing a 
DFA including a representation of said lexical tokens and said grammar". 
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However, Del Monte teaches providing a deterministic finite automaton (DFA) 
representing grammar (see col. 14 lines 21-31). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to modify Riddle In view of Including a DFA as In Del Monte including a 
representation of said lexical tokens as In Tang. One would be motivated to include a 
DFA including recognizing the lexical tokens using the DFA In Riddle because doing so 
would allow the DFA to determine the protocol in which the packet is to be implemented 
and map an ordered sequence of Input events into a corresponding sequence according 
to the control section of the data where the next state is uniquely determined by a single 
Input event. 

As to claim 18, Riddle teaches a network data packet classifier comprising an 
input port for receiving network data packets comprising a stream of data (see fig. 1 and 
abstract), a grammar graph and plural regular expressions (see col. 14 line 21-31 and 
claim 1), Identify a protocol structure in a received network data packet wherein 
processing of said network data depends on said protocol structure (see fig. 4A and Its 
corresponding Illustration. 

Riddle doesn't teach the limitation "representing said grammar graph and 
decompression logic producing lexical tokens". 

However Tang teaches scanning said incoming network data using lexical token 
scanning to produce plural lexical tokens and parsing said lexical tokens (see abstract, 
statements in a program are lexically scanned and parsed into a parse tree) and Del 
Monte teaches providing a deterministic finite automaton (DFA) representing grammar 
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graph (see col. 14lines 21-31) and teaches decompression logic configured to scan 
data with said DFA (see col. 1 ). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to modify Riddle in view of decompression logic configured to scan data 
with DFA as in Del Monte and parsing lexical tokens as in Tang. One would be 
motivated modify Riddle by using a DFA and a decompression logic and parsing lexical 
tokens because doing so would allow the network to map an ordered sequence of input 
events into a corresponding sequence by scanning the lexical tokens according to the 
control section of the data where the next state is uniquely determined by a single input 
event. 

As to claim 22, Riddle teaches network data vary from one packet to another 
(see abstract and claim 1). 

As to claim 23, Del Monte teaches DFA is in compressed form (see col. 2 lines 

42-56 

As to claim 28, Del Monte teaches means for scanning includes a memory 
component configured with data to represent a deterministic finite automaton (DFA) 
(see fig. 1 and its corresponding illustration and col. 14 lines 21-31) 

As to claim 29, Riddle teaches memory component is configured to include said 
grammar (see fig. 1 A and its corresponding illustration). 

6. Claims 15 and 30 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Riddle in view of Tang in further view of Boucher et al., U.S. Patent No. 6,226,680 
(referred to hereafter as Boucher). 
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Riddle and Tang do not teach the limitation "arithmetic logic unit configured to 
perform operations in accordance with arithmetic specifier". However Boucher teaches 
method of protocol processing including an arithmetic logic unit configured to perform 
operations in accordance with arithmetic specifiers (see fig. 14 and its corresponding 
illustration). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to modify the combined teachings of Riddle and Tang in view of using an 
arithmetic and logic unit to perform operations as in Boucher. One would be motivated 
to include an arithmetic logic unit in Riddle because doing so would allow faster 
classification of data packets since the processing and determination of the data 
packets properties are done by the arithmetic logic unit rather than being done by the 
network processor that might have an overload due to the traffic coming in and out of 
the network. 

7, Claims 16 and 17 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Riddle in view of Tang, in view of Del Monte further in view of Moreno. 

As to claim 16, Riddle and Tang teach a method for classifying received network 
data comprising scanning incoming data using lexical token scanning wherein said 
network data is treated as a stream of input bytes, said network data being organized 
into data packets, said scanning resulting in the identification of a data packet belonging 
to one of a plurality of classes. 

Riddle and Tang do not teach the limitation "some of said states further include a 
skip instruction". However Moreno teaches a skip instruction (see claims 7 and 8). 
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It would have been obvious for one of the ordinary skill in the art at the tinne of 
the invention to modify Riddle in view of identifying a skip operation and in response 
thereto skipping over one or more subsequent input bytes as in Moreno. One would be 
motivated to modify Riddle in view of identifying a skip operation and in response 
thereto skipping over one or more subsequent input bytes because doing so would 
allow the processor to detect an error in the stream of incoming data and skip to the 
next data stream by detecting address of the beginning of the next incoming data 
packet. 

As to claim 17, Riddle teaches regular expressions include data storage 
operations (see col. 13 lines 48-56), 

8. Claims 19, 20, 24-26 are rejected under 35 U.S.C, 103(a) as being unpatentable 
over Riddle in view of Tang in view of Del Monte, further in view of Boucher. 

Riddle, Tang and Del Monte do not teach the limitation "arithmetic logic unit 
configured to perform operations in accordance with arithmetic specifier". However 
Boucher teaches method of protocol processing including an arithmetic logic unit 
configured to perform operations in accordance with arithmetic specifiers (see fig. 14 
and its corresponding illustration). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to modify the combined teachings of Riddle and Tang in view of using an 
arithmetic and logic unit to perform operations as in Boucher. One would be motivated 
to include an arithmetic logic unit in Riddle because doing so would allow faster 
classification of data packets since the processing and determination of the data 
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packets properties are done by the arithmetic logic unit rather than being done by the 
network processor that might have an overload due to the traffic coming in and out of 
the network. 

As to claim 20, Boucher teaches at least one register operatively coupled to said 
arithmetic logic unit where arithmetic logic unit further configured to store data into said 
register in response to save instruction (see fig. 14 and its corresponding illustration). 

As to claim 24, Boucher teaches a base memory, next state memory and base 
memory configured to contain address locations of said next state memory (see fig. 
15A-C). 

As to claim 25, Boucher teaches memories are random access memories (see 
fig. 15A). 

As to claim 26, Boucher teaches said memories are read-only memories (see fig. 
13 and its corresponding illustration). 

9. Claim 21 is rejected under 35 U.S.C. 103(a) as being unpatentable over Riddle in 
view of Tang, in view of Del Monte in view of Boucher further in view of Moreno. 

Riddle does not teach the limitation "some of said states further include a skip 
instruction". However Moreno teaches a skip instruction to skip over an amount of data 
(see claims 7 and 8). 

It would have been obvious for one of the ordinary skill in the art at the time of 
the invention to modify Riddle in view of identifying a skip operation and in response 
thereto skipping over one or more subsequent input bytes as in Moreno. One would be 
motivated to modify Riddle in view of identifying a skip operation and in response 
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thereto skipping over one or more subsequent input bytes because doing so would 
allow the processor to detect an error in the stream of incoming data and skip to the 
next data stream by detecting address of the beginning of the next incoming data 
packet. 

10. Claims 1 1-14 do not add any new limitations above claims 1-13 and therefore are 
rejected for similar reasons. 

1 1 ■ Applicant's arguments filed have been fully considered but they are not 
persuasive. 

In the remarks, the applicant argues in substance that; A) Riddle does not define 
a grammar B) Riddle does not suggest the flow can be viewed as language C) there is 
no suggestion to incorporate Del Monte into Riddle D) Riddle and Tang do not suggest 
subjecting network data to lexical scanning E) Riddle does not allow for detecting "the 
beginning of the next incoming data packet" F) Riddle does not teach a grammar graph. 

In response to A) Riddle classifies data packets according to a set of rules that 
define the grammar for the classification of data (see col. 13 lines 57-col. 14 lines 9) for 
example Riddle checks the protocol type and the port number of the incoming data 
packets and accordingly classifies the data packets (see col. 14 lines 50-col. 15 lines 
20) and therefore Riddle teaches the claimed limitation "providing a grammar"'. 

In response to B) Applicant is arguing Riddle does not suggest the flow can be 
viewed as language. This limitation is not found in the claims. Claimed subject matter 
net the specification is the measure of the invention. Disclosure contained in the 
specification cannot be read into the claims. 
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In response to C) In response to applicant's argument that there is no suggestion 
to combine the references, the examiner recognizes that obviousness can only be 
established by combining or modifying the teachings of the prior art to produce the 
claimed invention where there is some teaching, suggestion, or motivation to do so 
found either in the references themselves or in the knowledge generally available to one 
of ordinary skill in the art. See In re Fine, 837 F.2d 1071, 5 USPQ2d 1596 (Fed. Cir. 
1988)and In re Jones, 958 F.2d 347, 21 USPQ2d 1941 (Fed. Cir. 1992). In this case, 
the IP packet is parsed to identify attributes such as protocol type and the port number 
and classify data packets according to these attributes (see col. 14 lines 50-col. 15 lines 



In response to D) Riddle parses the data packets and produces tokens such as 
the protocol type and the port number and classify data packets according to these 
attributes (see col. 14 lines 50-col. 15 lines 20). 

In response to E) Riddle uses C language to classify data packets (see col. 5 
lines 60-67) where one of the ordinary skill in the art would know how to implement skip 
and branch functions using C language. 

In response to F) Riddle teaches a classification tree including a method of 
identifying new classes, creating new classes when a threshold and classifying data 
which reads on the claimed limitation "grammar graph" (see col. 14 lines 15-56). 
12. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .1 36(a). 



20). 
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A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action Is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 
13. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Hussein A El-chanti whose telephone number Is 
(703)305-4652. The examiner can normally be reached on Mon-Fri 8:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ario Etienne can be reached on (703)308-7562. The fax phone number for 
the organization where this application or proceeding Is assigned is 703-872-9306. 

Hussein El-chanti 

March 18, 2004 
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